StaticUsers.net – Microsoft Personal Web Server

Microsoft Product for the Macintosh?

Ya I know It comes with os 8.x. If you have ever used a PC, or so they say, “Its Microsoft, its breaks, i tried to uninstall it, it broke” Well I tried to remove Microsoft Personal Web Server from my Macintosh and ran into a little problem i forgot to turn off 1 extension. WaMMo! My computer froze on startup. Probably the point where the extension realized all the other components were not there. I wonder if they plan on fixing it so it does …

Security-Ware – Physical Security for your Macintosh. Keep your Hardware...

We all realize security is a issue for our computers, but how secure can your password and encrypted files be when your computers have been stolen?

The San Diego, California based company, SecurityWare offers a wide variety of anti theft devices for your Macintosh computers and PC’s. After careful overview of the products we felt the Cable Security kits would be most use full to the general market!

SecurityWare’s iBook/iMac kits (with or without plate) makes it possible and affordable to secure your Mac. SecureMac travels from locations and our iBooks sometimes …

StaticUsers.net – AppleShare + NT Security Issues

Information:

This concerns Macs connected to NT servers using Service Pack 4. If a Mac changes its password when connected to NT SP4, from that point on, PCs can log into that user account with NO password (a null password.) – contributed by John Wolf

Views:

This can be a serious bug. Its not well known, and when an Appleshare Client is added, not many people think to check for security issues because, well, it’s APPLESHARE! This causes a problem on the network.

Reasonings and Technical How-SO

snip-it from ms99-004 advisory Issue

The Windows NT Security …

OSX -CGI Flaw

A fatal bug in MacOS X Server renders Apple’s new operating system practically useless as a web server. The problem is particularly critical since it affects MacOS Server X release 1.0 in one of its key features.

During a server load test at c’t Labs, the Apache web server built into the OS caused the machine to halt with a fatal “System Panic” error following successive CGI script queries.

CGI scripts (Common Gateway Interface) are a common server extension, frequently used for web queries. The test stopped the system cold whenever 32 …

StaticUsers.net – Modem Security Flaws

Information

A lot of this information was gathered from other sources on the Internet. This flaw is old. Just not well publicized. Now that it is, we can cover it a little more and explain why it happens, and what damage it can cause. This is a Denial of Service attack in most cases. There are a lot of scripts out there to execute this DoS attack. So watch out.
A excellent source for more information is the Macintouch ModemSecurity Page.

Views

This effects more than Macintosh Modems. Linux dialup users have seen this …

StaticUsers.net – FileGuard

FileGuard Security Advisory – Disengage 1.0

OS 9.1 Ready, Now fully being developed and supported by Intego

Information

FileGuard has been a trusted program amongst Mac users who have searched for a way to keep their computers and data secure, in most recent news Intego purchased the software and will continue to make improvements and develop the software for both Macintosh and PC platform. FileGuard now fully works with Mac OS 9.1 and has many bug fixes as well as feature advancements.

Brief rundown on the functionality of FileGuard 4.0. Allow multiple users to …

StaticUsers.net – Apple Powerbooks Security Control Panel

Information

All Apple Powerbook have the option of setting up a security control panel, making it so when you boot you must enter a password before it mounts the drive. Good security for a laptop!

Views

Good security for those LapTop Users. At lease this program can fool an idiot!

Insecurity

Security Breaches in the Password Security Control Panel: Owners of Powerbook have the option of using the Control Panel “Password Security”. With Password Security turned on the owner of the PowerBook can password-protect his/her computer. This involves a password dialog asking for a password …

StaticUsers.net – Sonata – Outlook Express 4.5 Security Bug

Email encryption problems should be solved in Sonata

by Dennis Sellers, dsellers@maccentral.com
June 15, 1999, 9:45 am ET

If you’re using a free Mac email application, you inherently have a lack of secure encryption as Andrew Jung, a computer science student at Camosun College (Victoria BC, Canada), recently discovered. Jung was using Outlook Express 4.5 on the family iMac when he came upon what he described a “disturbing bug.”

Jung attempted to use the “Change Current User” menu item of Outlook Express to access his personal email account (three separate email accounts were on …

StaticUsers.net – Internet Config Advisory

Password weakness in Internet Config in MacOS
What is Internet Config?

From Internet Config FAQ: “The Internet Configuration System was designed to make your life easier by reducing the number of times which you need to enter your Internet preferences into the various preferences dialogs of all your Internet applications.

For example, currently you need to enter your Email address into many common
Macintosh Internet applications, for example Eudora, NewsWatcher and Anarchie.
The goal of the system was to get each of these applications to get this information
from one common place and to give you …

StaticUsers.net – Eudora Client + Pro

Information

Euroda is a widely supported Email client for both Macs and PC’s. Pro Version supports multiple accounts and personalities.

Views

Eudora has grown a lot from user suggestions. They have a nice BETA SITE where you can beta test their PRO version.

Download Versions

Download new Beta Version of Eudora PRO
Download FREE Eudora Light Version or Purchase PRO Version

More Info

QUALCOMM can be reached by email, website or call them directly at 1 800 238 3672

Insecurity

This mail client has been pretty secure. There has been a little exploit known that will show a password for …

‘Mac Attack’ Denial of Service Information

Information

John Copeland, a professor at Georgia Tech, noticed his computer sending packets when he was not conducting any traffic. This Mac Attack effects computers running MacOS 9 with a internet or network connection. A FAQ Page has been setup to help you understand the situation.

FIX

After a lot of complaints from MacOS 9 Owners, Apple released a correct solution for the denial of service problems. Open Transport 2.6 is the fix, Only for Mac OS 9; Mac OS 8.6 for PowerMacintosh G4, iBook, and iMac (Slot-loading) computers. Apple says addresses DHCP …

GrouchySmurf 1.0 – Spoofed Broadcast ICMP

GrouchySmurf is the first public release of an ICMP broadcast attack for the MacOS. Last night the application was released by Freaks Macintosh Archives a hacker related website for the macintosh community. They wrote a review/press release on the application to hype it. Now it is online and available for download. The ICMP broadcast attack will be explained in details further in this document.

Were not going to try to hide the bad uses of this program. This review is to inform you of the new software released and what damages …

Apple LaserWriter Driver

Information

Do you know that every single postscript file that you print on a Macintosh using the Print To File function actually secretly puts your email address in the file? Pretty scary, isn’t it?

Problem

Apple LaserWriter driver embeds the user email address within the postscript.

Product Effected:

All postscript file printed via print to file in MacOS.
(Tested on 8.6 and 9.0)

Download

You can download Strip A Post from:

(Strip A Post is a nice little utility that removes that piece of personal information from those postscript files)
SecureMac – 1.0 version

Jake Luck Homepage

Closing Notes

The Author Jake Luck …

Mac OS X Single User Mode Root Access – CodeSamurai...

Mac OS X Single User Mode Root Access – CodeSamurai
Forward

There’s always the constant battle between user-friendliness and security. Apple has known about this vulnerability for some time now; and back in the days of OpenStep, a patch to that OS was released to fix this problem. Now is the era of Mac OS X, and even though that old OpenStep patch won’t work for OS X, Apple could still easily release a similar patch, or better yet, a permanent fix that will be forever installed by default.

It is argued that …

Mac OS X Security – Third lesson by Chevell@SecureMac.com

Macintosh OS X Security – Third Lesson

MAC OS X Now that we’ve covered the basics of computer security in general and an overview of Mac OS X security specifically, it is time to get a bit more in depth. Because some UNIX gurus and elite hackers now know Mac OS X better than most early-adopting Mac fans, caution needs to be taken above and beyond what has already been covered. This is because of the advanced capabilities of the new OS and the open source condition of many of the …

Mac OS X Security – Second Lesson by Chevell@SecureMac.com

Macintosh OS X Security – Second Lesson – Chevell

MAC OS X The early adopters have been using OSX 10.0 for the better part of two weeks now. Early adopters, while not all the UNIX gurus and application developers Apple targeted the release for, are zealous, ambitious and daring- perhaps too much so.

As I stated in my previous Mac OS X Security overview, Mac OS X is a completely new operating system to most Mac users. Its UNIX under pinnings are foreign to the point-and-click community. The interface is certainly foreign …

Column: Macs and Cable Modem

Cable Modem and Macs Security Information
Security Aspect: Macs and Cable Modems

An issue has surfaced which has been ignored and avoided for a long time. In the past, people thought of Macintosh computers as being so secure that you didn’t even need to talk about security. Since the early 90’s, there have been a few web sites dedicated to Macintosh security or hacking, all of which have surfaced, dissolved and expired.

Picture your network. You’re on one line, and your computer is only listening to its own traffic. But computers aren’t smart, …

IPNetSentry Network Internet Firewall Software

Information

IPNetSentry is a simple and intelligent security application which protects your Macintosh from outside Internet intruders. This is particularly important for Macintosh users who have cable modem, DSL, or another high-speed Internet service where connections can be maintained and left unattended for hours (or days) at a time.

Unlike most other Internet security products, IPNetSentry does not erect barriers for the safe use of your Internet connection. There is no need to “punch holes” in a firewall for specific applications you may wish to run. Instead, IPNetSentry silently and intelligently watches …

OpenSSH for Mac OS X – Installation, How to and Custom Packages

What is OpenSSH

OpenSSH is a cost free version of the SSH protocol suite. Many of the users who utilize telnet, ftp, rlogin and other programs may not realize that their passwords are transmitted in plain text (unencrypted) across the Internet. The OpenSSH suite encrypts all data that comes to and from your computer including passwords.

The OpenSSH suite includes many functions and programs. SSH replaces rlogin and telnet, sftp replaces the plain ftp program and rcp is replaced with a enhanced scp program.

Luckily enough Apples new operating system, Mac OS X …

Microsoft Security Bulletin MS01-028 RTF document linked to template can run...

Security Bulletin Issued by Microsoft May 21, 2001

The following is the list of vulnerable products:

        Microsoft Word 98 for the Mac
        Microsoft Word 2001 for the Mac

Summary

When Microsoft Word opens a RTF (Rich Text Format) file that contains a link to a template, only the RTF file is checked for macros. When a a macro is embedded into the template file that was opened from a link in the RTF file an attacker could set the macro to run automatically and execute commands without your authorization – you even knowing …